<!DOCTYPE html>

<html lang="en">

<head>
    
    <title>【每天一个电脑小技巧】Windows强制删除顽固文件 - ZeyuWu&#39;s Blog</title>
    <meta charset="UTF-8">
    <meta name="keywords" content="">
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=5">
    
    

    <link rel="shortcut icon" href="/favicon.ico" type="image/x-icon" />
    <meta name="description" content="Windows强制删除顽固文件  2022年1月12日更新：  起因  那是一个风和日丽的下午，正在我愉快地网上冲浪的时候，电脑啪的一下出来一个弹窗：  啥玩意？我安装过么？居然在我的电脑后台偷偷运行？  于是转手就把阿里巴巴卸载了，弹窗居然还在。 任务管理器找到进程，转到进程所在文件夹，发现是位于C:\Program Files (x86)\AlibabaProtect目录。里面带一个unins">
<meta property="og:type" content="article">
<meta property="og:title" content="【每天一个电脑小技巧】Windows强制删除顽固文件">
<meta property="og:url" content="http://example.com/2022/01/12/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/index.html">
<meta property="og:site_name" content="ZeyuWu&#39;s Blog">
<meta property="og:description" content="Windows强制删除顽固文件  2022年1月12日更新：  起因  那是一个风和日丽的下午，正在我愉快地网上冲浪的时候，电脑啪的一下出来一个弹窗：  啥玩意？我安装过么？居然在我的电脑后台偷偷运行？  于是转手就把阿里巴巴卸载了，弹窗居然还在。 任务管理器找到进程，转到进程所在文件夹，发现是位于C:\Program Files (x86)\AlibabaProtect目录。里面带一个unins">
<meta property="og:locale" content="en_US">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641984655/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E8%B5%B7%E5%9B%A0_xibnrx.jpg">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641984834/emoji/R.cf8317c69b83c9a67761cc62e8fcf702_towotv.jpg">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641985034/emoji/%E6%9D%83%E9%99%90_ja6srv.jpg">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641985132/emoji/%E6%97%A0%E6%B3%95%E6%9E%9A%E4%B8%BE_zegvj3.jpg">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641985999/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E4%BF%AE%E6%94%B9%E5%8F%AA%E8%AF%BB_heori2.jpg">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641985993/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20220112191234_slbaw6.jpg">
<meta property="og:image" content="https://res.cloudinary.com/changsha/image/upload/v1641985995/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20220112191250_f0qear.jpg">
<meta property="article:published_time" content="2022-01-12T10:43:00.110Z">
<meta property="article:modified_time" content="2022-01-12T11:24:32.056Z">
<meta property="article:author" content="ZeyuWu">
<meta name="twitter:card" content="summary">
<meta name="twitter:image" content="https://res.cloudinary.com/changsha/image/upload/v1641984655/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E8%B5%B7%E5%9B%A0_xibnrx.jpg">
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/combine/npm/highlight.js@9.15.8/styles/atom-one-dark.css,npm/justifiedGallery@3.8.1/dist/css/justifiedGallery.min.css,gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.css,npm/hexo-theme-nexmoe@latest/source/lib/mdui_043tiny/css/mdui.css,npm/hexo-theme-nexmoe@latest/source/lib/iconfont/iconfont.css?v=233" crossorigin>
    <link rel="stylesheet" href="/css/style.css?v=1658327705553">
     
    
    <link rel="stylesheet" href="/lib/iconfont/iconfont.css?v=1658327705553">
    
<meta name="generator" content="Hexo 5.4.0"></head>

<body class="mdui-drawer-body-left">
    
    <div id="nexmoe-background">
        <div class="nexmoe-bg" style="background-image: url(https://cdn.jsdelivr.net/gh/nexmoe/nexmoe.github.io@latest/images/cover/5c3aec85a4343.jpg)"></div>
        <div class="mdui-appbar mdui-shadow-0">
            <div class="mdui-toolbar">
                <a mdui-drawer="{target: '#drawer', swipe: true}" title="menu" class="mdui-btn mdui-btn-icon mdui-ripple"><i class="mdui-icon nexmoefont icon-menu"></i></a>
                <div class="mdui-toolbar-spacer"></div>
                <!--<a href="javascript:;" class="mdui-btn mdui-btn-icon"><i class="mdui-icon material-icons">search</i></a>-->
                <a href="/" title="ZeyuWu" class="mdui-btn mdui-btn-icon"><img src="https://res.cloudinary.com/changsha/image/upload/v1639369050/Blog/Config/hutao_aif08p.jpg" alt="ZeyuWu"></a>
            </div>
        </div>
    </div>
    <div id="nexmoe-header">
        <div class="nexmoe-drawer mdui-drawer" id="drawer">
    <div class="nexmoe-avatar mdui-ripple">
        <a href="/" title="ZeyuWu">
            <img src="https://res.cloudinary.com/changsha/image/upload/v1639369050/Blog/Config/hutao_aif08p.jpg" alt="ZeyuWu" alt="ZeyuWu">
        </a>
    </div>
    <div class="nexmoe-count">
        <div><span>Articles</span>4</div>
        <div><span>Tags</span>0</div>
        <div><span>Categories</span>0</div>
    </div>
    <div class="nexmoe-list mdui-list" mdui-collapse="{accordion: true}">
        
        <a class="nexmoe-list-item mdui-list-item mdui-ripple false" href="/" title="回到首页">
            <i class="mdui-list-item-icon nexmoefont icon-home"></i>
            <div class="mdui-list-item-content">
                回到首页
            </div>
        </a>
        
        <a class="nexmoe-list-item mdui-list-item mdui-ripple false" href="/about.html" title="关于博客">
            <i class="mdui-list-item-icon nexmoefont icon-info-circle"></i>
            <div class="mdui-list-item-content">
                关于博客
            </div>
        </a>
        
        <a class="nexmoe-list-item mdui-list-item mdui-ripple false" href="/PY.html" title="我的朋友">
            <i class="mdui-list-item-icon nexmoefont icon-unorderedlist"></i>
            <div class="mdui-list-item-content">
                我的朋友
            </div>
        </a>
        
    </div>
    <aside id="nexmoe-sidebar">
    
    <div class="nexmoe-widget-wrap">
    <div class="nexmoe-widget nexmoe-search">
         
            <form id="search_form" action_e="https://cn.bing.com/search?q=site:nexmoe.com" onsubmit="return search();">
                <label><input id="search_value" name="q" type="search" placeholder="Search"></label>
            </form>
         
    </div>
</div>
    
    <div class="nexmoe-widget-wrap">
    <div class="nexmoe-widget nexmoe-social">
        <a class="mdui-ripple" href="https://jq.qq.com/?_wv=1027&k=5CfKHun" target="_blank" mdui-tooltip="{content: 'QQ群'}" style="color: rgb(249, 174, 8);background-color: rgba(249, 174, 8, .1);">
            <i class="nexmoefont icon-QQ"></i>
        </a><a class="mdui-ripple" href="https://space.bilibili.com/20238211" target="_blank" mdui-tooltip="{content: '哔哩哔哩'}" style="color: rgb(231, 106, 141);background-color: rgba(231, 106, 141, .15);">
            <i class="nexmoefont icon-bilibili"></i>
        </a><a class="mdui-ripple" href="https://github.com/nexmoe/" target="_blank" mdui-tooltip="{content: 'GitHub'}" style="color: rgb(25, 23, 23);background-color: rgba(25, 23, 23, .15);">
            <i class="nexmoefont icon-github"></i>
        </a>
    </div>
</div>
    
    

    
    
    
</aside>
    <div class="nexmoe-copyright">
        &copy; 2022 ZeyuWu
        Powered by <a href="http://hexo.io/" target="_blank">Hexo</a>
        & <a href="https://github.com/theme-nexmoe/hexo-theme-nexmoe" target="_blank">Nexmoe</a>
        <br><a target="_blank" href="https://www.upyun.com/?utm_source=lianmeng&utm_medium=referral"><img src="https://i.dawnlab.me/c0268c1e6cfd0863d6ba35be1575941a.png" width="150px"></a><script data-ad-client="ca-pub-2058306854838448" async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>
    </div>
</div><!-- .nexmoe-drawer -->
    </div>
    <div id="nexmoe-content">
        <div class="nexmoe-primary">
            <div class="nexmoe-post">

  <article>
      
          <div class="nexmoe-post-cover" style="padding-bottom: 66.66666666666666%;"> 
              <img data-src="https://cdn.jsdelivr.net/gh/nexmoe/nexmoe.github.io@latest/images/cover/5c3aec85a4343.jpg" data-sizes="auto" alt="【每天一个电脑小技巧】Windows强制删除顽固文件" class="lazyload">
              <h1>【每天一个电脑小技巧】Windows强制删除顽固文件</h1>
          </div>
      
      
      <div class="nexmoe-post-meta nexmoe-rainbow" style="margin:10px 0!important;">
    <a><i class="nexmoefont icon-calendar-fill"></i>2022年01月12日</a>
    <a><i class="nexmoefont icon-areachart"></i>455 字</a>
    <a><i class="nexmoefont icon-time-circle-fill"></i>大概 1 分钟</a>
</div>

      

      <center>Windows强制删除顽固文件</center>

<p>2022年1月12日更新：</p>
<ul>
<li>起因</li>
</ul>
<p>那是一个风和日丽的下午，正在我愉快地网上冲浪的时候，电脑啪的一下出来一个弹窗：</p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641984655/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E8%B5%B7%E5%9B%A0_xibnrx.jpg" alt="https://res.cloudinary.com/changsha/image/upload/v1641984655/Blog/Article/%5B%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7%5D%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E8%B5%B7%E5%9B%A0_xibnrx.jpg" class="lazyload"></p>
<p>啥玩意？我安装过么？居然在我的电脑后台偷偷运行？</p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641984834/emoji/R.cf8317c69b83c9a67761cc62e8fcf702_towotv.jpg" alt="22" class="lazyload"></p>
<p>于是转手就把阿里巴巴卸载了，弹窗居然还在。</p>
<p>任务管理器找到进程，转到进程所在文件夹，发现是位于C:\Program Files (x86)\AlibabaProtect目录。里面带一个uninstall程序，卸载程序无法运行。普通的删除快捷键也无法删除这个目录，提示无权限。</p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641985034/emoji/%E6%9D%83%E9%99%90_ja6srv.jpg" alt="https://res.cloudinary.com/changsha/image/upload/v1641985034/emoji/%E6%9D%83%E9%99%90_ja6srv.jpg" class="lazyload"></p>
<p>发现此文件夹根本没有开启修改权限，为其开放此权限，系统又出现如下提示：</p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641985132/emoji/%E6%97%A0%E6%B3%95%E6%9E%9A%E4%B8%BE_zegvj3.jpg" alt="https://res.cloudinary.com/changsha/image/upload/v1641985132/emoji/%E6%97%A0%E6%B3%95%E6%9E%9A%E4%B8%BE_zegvj3.jpg" class="lazyload"></p>
<p>不得不服，够流氓，系统权限控制这块给你玩明白了。</p>
<p>于是去寻找此问题解决方案。</p>
<p>修改AlibabaProtect只读属性，又出现如下弹窗，而其它文件夹不会有这种权限限制</p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641985999/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E4%BF%AE%E6%94%B9%E5%8F%AA%E8%AF%BB_heori2.jpg" alt="https://res.cloudinary.com/changsha/image/upload/v1641985999/Blog/Article/%5B%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7%5D%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E4%BF%AE%E6%94%B9%E5%8F%AA%E8%AF%BB_heori2.jpg" class="lazyload"></p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641985993/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20220112191234_slbaw6.jpg" alt="https://res.cloudinary.com/changsha/image/upload/v1641985993/Blog/Article/%5B%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7%5D%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20220112191234_slbaw6.jpg" class="lazyload"></p>
<p><img data-fancybox="gallery" data-sizes="auto" data-src="https://res.cloudinary.com/changsha/image/upload/v1641985995/Blog/Article/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20220112191250_f0qear.jpg" alt="https://res.cloudinary.com/changsha/image/upload/v1641985995/Blog/Article/%5B%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7%5D%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE_20220112191250_f0qear.jpg" class="lazyload"></p>
<p>综合以上现象，说明此类顽固程序利用Windows超级管理员把自己的安装路径设为了系统文件夹，伪装成系统文件，以至于无法通过一般手段删除。依照此思路，可能的解决方案有如下几个：</p>
<p>1.直接进PE系统，或者双系统电脑切换别的系统，再进入此路径将文件删除</p>
<p>2.网传重启进入安全模式可删除</p>
<p>3.以毒攻毒，研究SYSTEM权限获取方式，获取到SYSTEM权限后将其删除</p>
<p>那当然是第三种方式最为优雅。</p>
<hr>
<p>研究了几个小时，暂时先作为记录，将第三种方法的方式研究透后，应该能解决一切顽固流氓软件问题。</p>

  </article>

  
      
    <div class="nexmoe-post-copyright">
        <strong>Author：</strong>ZeyuWu<br>
        <strong>Link：</strong><a href="http://example.com/2022/01/12/[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6/" title="http:&#x2F;&#x2F;example.com&#x2F;2022&#x2F;01&#x2F;12&#x2F;[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6&#x2F;" target="_blank" rel="noopener">http:&#x2F;&#x2F;example.com&#x2F;2022&#x2F;01&#x2F;12&#x2F;[%E6%AF%8F%E5%A4%A9%E4%B8%80%E4%B8%AA%E7%94%B5%E8%84%91%E5%B0%8F%E6%8A%80%E5%B7%A7]%E5%BC%BA%E5%88%B6%E5%88%A0%E9%99%A4%E9%A1%BD%E5%9B%BA%E6%96%87%E4%BB%B6&#x2F;</a><br>
        
            <strong>版权声明：</strong>本文采用 <a href="https://creativecommons.org/licenses/by-nc-sa/3.0/cn/deed.zh" target="_blank">CC BY-NC-SA 3.0 CN</a> 协议进行许可
        
    </div>


  
  
  <div class="nexmoe-post-meta nexmoe-rainbow">
    
    
</div>

  
      <div class="nexmoe-post-footer">
          <section class="nexmoe-comment">
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/gitalk@latest/dist/gitalk.min.css">
<div id="gitalk"></div>
<script src="https://cdn.jsdelivr.net/npm/gitalk@latest/dist/gitalk.min.js"></script>
<script type="text/javascript">
    var gitalk = new Gitalk({
        clientID: '80b2453b6d5f37ad6225',
        clientSecret: '43e99fa852795c9a7b3eb924b2558c64b84bbdeb',
        id: window.location.pathname,
        repo: 'nexmoe.github.io',
        owner: 'nexmoe',
        admin: 'nexmoe'
    })
    gitalk.render('gitalk')
</script>
</section>
      </div>
  
</div>
            <div class="nexmoe-post-right">
              <div class="nexmoe-fixed">
                  <div class="nexmoe-tool"> 
                    
                      
                    
                      <a href="#nexmoe-content" class="toc-link" aria-label="回到顶部" title="top"><button class="mdui-fab mdui-ripple"><i class="nexmoefont icon-caret-top"></i></button></a>
                  </div>
              </div>
            </div>
        </div>
    </div>
     
    <div id="nexmoe-search-space">
        <div class="search-container">
            <div class="search-header">
                <div class="search-input-container">
                    <input class="search-input" type="text" placeholder="Search" oninput="sinput();">
                </div>
                <a class="search-close" onclick="sclose();">×</a>
            </div>
            <div class="search-body"></div>
        </div>
    </div>

    <script src="https://cdn.jsdelivr.net/combine/npm/lazysizes@5.1.0/lazysizes.min.js,npm/mdui@0.4.3/dist/js/mdui.min.js?v=1"></script>
<script src="https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.min.js"></script>
<script src="https://cdn.jsdelivr.net/gh/fancyapps/fancybox@3.5.7/dist/jquery.fancybox.min.js"></script>

 

<script async src="/js/app.js?v=1658327705554"></script>



<script src="https://cdn.jsdelivr.net/npm/justifiedGallery@3.8.1/dist/js/jquery.justifiedGallery.min.js"></script>
<script>
	$(".justified-gallery").justifiedGallery({
		rowHeight: 160,
		margins: 10,
	});
</script>


    





</body>

</html>
